Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
File: tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer (raw, json)
Hash identifier: prNYYPVB57H8ckiMMKdL+o5QguoQeTajxCPzTxaDYbA=
Subject key identifier: B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C69147DA2B5BABDF9EF5438E929FD185B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 17 Feb 2026 00:51:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 167.254.160.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:69:14:7d:a2:b5:ba:bd:f9:ef:54:38:e9:29:fd:18:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 17 00:51:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:47:74:0f:90:d7:60:42:b4:7b:b2:23:14:46:
99:51:05:1e:04:ef:e5:af:94:28:51:ae:88:7b:13:
33:d0:55:10:3e:bb:15:1c:05:6e:cb:9b:1e:93:ac:
86:24:9e:fa:f6:f5:d7:ec:86:78:67:99:71:e5:d1:
71:38:be:8b:51:07:ce:ad:ea:74:22:86:c4:78:a8:
f0:a1:52:5a:f7:da:19:16:db:59:5d:e9:0a:12:5b:
ba:13:6e:9a:66:79:96:b7:9c:0f:a2:1f:76:30:1f:
ef:11:c8:96:de:94:e0:db:59:a4:8e:9f:8e:6b:72:
25:54:9e:9a:23:d0:5e:f5:fb:a6:2e:85:64:7e:f5:
0d:4c:45:25:fd:c2:7a:78:8a:fd:78:3e:1d:0f:15:
b5:88:03:53:21:0c:76:71:5b:b4:5f:cc:c5:f8:3c:
5d:ed:40:d6:6e:00:c8:63:f8:10:3c:36:6a:30:58:
0a:04:7e:26:18:d6:e7:ce:b5:ab:ec:9c:66:19:07:
b1:23:d7:5a:63:70:9e:ec:19:3f:1c:1e:96:d9:08:
fe:d5:3d:19:a4:87:af:eb:c0:8f:bb:47:14:94:88:
d4:dc:99:81:94:44:ef:ca:66:00:44:5d:da:c4:3a:
ae:b6:44:b8:2a:1c:8d:6b:ec:04:6c:ab:a4:68:94:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.254.160.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:d1:09:82:85:1b:bb:36:d4:53:cf:dd:2f:5d:80:1e:11:87:
5b:08:46:ad:87:34:08:b7:95:c6:b5:ef:ad:28:d3:b8:16:12:
41:b9:77:76:30:f8:ba:0f:7c:57:f6:2b:30:c9:8f:f1:a4:41:
e7:a6:24:7f:1f:4c:f4:36:3a:b7:12:e5:90:37:1d:67:44:9f:
98:60:08:66:48:e5:a6:de:d7:b7:ea:52:1f:46:0b:a8:41:bd:
55:ef:1f:99:70:89:b3:c0:8a:67:80:3d:54:87:7d:bc:12:97:
f7:00:88:77:8a:6e:c8:62:ab:c9:37:e5:15:2e:e5:42:ca:da:
27:44:cd:b7:cc:51:16:a6:50:6e:e7:9f:85:c0:ec:12:ad:b5:
70:4e:de:c6:b0:e6:ad:8e:e6:20:92:f7:3c:0e:71:6c:47:f1:
10:5f:bf:75:d5:b0:3f:e8:f1:97:71:9a:38:58:ba:4e:5a:e0:
94:1d:af:7b:4a:75:6b:14:d0:36:5a:08:51:c2:6e:c2:ed:54:
16:57:bf:18:41:8a:04:fd:12:6e:0d:d1:09:0e:04:2e:16:4c:
ac:8b:fa:21:da:cb:c8:1c:ee:e2:f6:51:8a:f6:03:b5:e5:76:
9d:c3:59:46:84:5a:52:e4:19:da:f7:82:79:3a:9f:82:d9:11:
35:eb:53:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:58:22 2026 by rpki-client